


Create rule for FTP data connections according to the range you specified when :.Click the OK button and wait for the rule to be created.Create rule for the FTP control connection:.Go to the Network page of your virtual machine.You need to open/forward ports in Cloud / Azure firewall/NAT for use with FTP server. Locate Microsoft FTP Service and click Restart service To restart FTP service go to Control Panel > System and Security > Administrative Tools and open Services. Any time you change this range, you will need to restart FTP service Use a Data Channel Port Range box for that. In such case, you need to tell the FTP server to use only the range that is opened on the firewall. You won’t probably want to open whole default port range 1024-65535. When behind an external firewall, you need to open ports for data connections (obviously in addition to opening an FTP port 21 and possibly an implicit TLS/SSL FTP port 990). On Cloud like Azure you will find the external IP address in Public IP address section of the virtual machine page. Specify your server’s external IP address.In IIS Manager, open FTP > FTP Firewall Support.If your server is behind an external firewall/ NAT, you need to tell the FTP server its external IP address, to allow passive mode connections. Self-signed certificates created by IIS Manager do not work with FTPS clients that check for key usage violations. To create a certificate with a correct key usage, use New-SelfSignedCertificate PowerShell as an Administrator: New-SelfSignedCertificate -CertStoreLocation cert:\localmachine\my -DnsName Servers behind external Firewall/NAT Click on Create Self-Signed Certificate action.In IIS Manager, open IIS > Server Certificates.You may also create a self-signed certificate locally, but there will be warning when connecting to the server. Ideally, you should acquire the certificate from a certificate authority. You need a TLS/ SSL certificate to secure your FTP server.
:max_bytes(150000):strip_icc()/fz3_win_main-5c14628746e0fb0001ff15ca.png)
#WINDOWS 2008R2 FTP PORTS TO OPEN WINDOWS#
In Windows Server Manager go to Roles node and in Web Server (IIS) > Role Services panel click Add Role Services.

Make sure Management Service > IIS Management Console role service is checked. Uncheck Web Server role service, if you do not need it.
